CVE-2024-41724

published 2025-03-10

CVE-2024-41724: Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. This issue affects…

Priority P3 52 high 8.7 CVSS 3.1

AV N AC H PR N UI N S C C H I H A N

Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server.

This issue affects all versions of Gallagher Command Centre prior to 9.20.1043.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
gallagher	command_centre_server	< 9.20.1043	9.20.1043

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-295